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CLAIMS 

What is claimed is: 

1 . A method comprising: 
identifying data to be signed; 

establishing parameter data for use with signature generating logic that 
encrypts data based on a Jacobian of a curve, said Jacobian having a genus 
exceeding one, said parameter data causing said signature generating logic to 
select at least one Gap Diffie-Hellman (GDH) group of elements relating to said 
curve; 

determining private key data and corresponding public key data using said 
signature generating logic; and 

signing said identified data with said private key data using said signature 
generating logic to create a corresponding digital signature. 

2. The method as recited in Claim 1, wherein said identified data 
includes a message me {0, 1 } *. 

3. The method as recited in Claim 2, wherein said parameter data 
establishes a base group G and a generator g as system parameters for said 
signature generating logic. 

4. The method as recited in Claim 3, wherein determining said private 
key data and said public key data includes: 

picking x^Z* p ; and 
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computing v <- g x , wherein said public key data includes v and said private 
key data includes x. 

5. The method as recited in Claim 4, wherein signing said identified 
data using with said private key data using said signature generating logic further 
includes: 

determining h+-h(m), and o<-h x , using at least one hash function, said 
private key data jc and said message m, wherein said digital signature includes a. 

6. The method as recited in Claim 5, wherein said hash function 
includes a full-domain hash function h: {0, l}*-> G. 

7. The method as recited in Claim 5, wherein said hash function 
includes a hash function /f :{0, l}*-^Gu {_l }, that outputs an element of 
G or ± indicating a failure. 

8. The method as recited in Claim 1 , further comprising: 
outputting said digital signature. 

9. The method as recited in Claim 8, further comprising: 
determining if said digital signature is valid using signature verifying logic. 

10. The method as recited in Claim 9, wherein said signature verifying 
logic is configured using said parameter data and said parameter data establishes a 
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base group G and a generator g as system parameters for said signature verifying 
logic. 

1 1 . The method as recited in Claim 10, wherein: 
said public key data includes public key data v; 
said identified data includes a message m\ 

said digital signature includes signature a; and 

determining if said digital signature is valid using said signature verifying 

logic further includes: 

determining h<- h(m) using at least one hash function, and 
verifying that (g, v, h, o) is a valid Gap Diffie-Hellman tuple. 

12. The method as recited in Claim 1, wherein said digital signature is 
included in a product ID. 

13. A computer-readable medium having computer implementable 
instructions for causing at least one processing unit to perform acts comprising: 

providing signature generating logic capable of digitally signing identified 

data; 

configuring said signature generating logic using parameter data, said 
signature generating logic being configured to digitally sign said identified data 
based on a Jacobian of a curve, said Jacobian having a genus greater than one, said 
parameter data causing said signature generating logic to select at least one Gap 
Diffie-Hellman (GDH) group of elements relating to said curve; 
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determining private key data and corresponding public key data using said 
signature generating logic; and 

signing said identified data with said private key data using said signature 
generating logic to create a corresponding digital signature. 

14. The computer-readable medium as recited in Claim 13, wherein said 
identified data includes a message me {0, 1 } *. 

15. The computer-readable medium as recited in Claim 14, wherein said 
parameter data establishes a base group G and a generator g as system parameters 
for said signature generating logic. 

16. The computer-readable medium as recited in Claim 15, wherein 
determining said private key data and said public key data includes: 

picking x£Z* p ; and 

computing v <- g x , wherein said public key data includes v and said private 
key data includes x. 

17. The computer-readable medium as recited in Claim 16, wherein 
signing said identified data using with said private key data using said signature 
generating logic further includes: 

determining h<^h(m), and a+-h x , using at least one hash function, said 
private key data x and said message w, wherein said digital signature includes o. 
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18. The computer-readable medium as recited in Claim 17, wherein said 
hash function includes a full-domain hash function h: {0, G. 

19. The computer-readable medium as recited in Claim 17, wherein said 
hash function includes a hash function /f :{0, l}*-^Gu {l }, that outputs 
an element of G or ± indicating a failure. 

20. The computer-readable medium as recited in Claim 13, further 
comprising: 

outputting said digital signature. 

21. The computer-readable medium as recited in Claim 20, further 
comprising: 

determining if said digital signature is valid using signature verifying logic. 

22. The computer-readable medium as recited in Claim 21, wherein said 
signature verifying logic is configured using said parameter data and said 
parameter data establishes a base group G and a generator g as system parameters 
for said signature verifying logic. 

23. The computer-readable medium as recited in Claim 22, wherein: 
said public key data includes public key data v; 

said identified data includes a message m; 
said digital signature includes signature a; and 
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determining if said digital signature is valid using said signature verifying 

logic further includes: 

determining h<- h(m) using at least one hash function, and 
verifying that (g, v, h, a) is a valid Gap Diffie-Hellman tuple. 

24. An apparatus comprising: 

memory configured to store identifying data that is to be signed; 

signature generating logic that encrypts data based on a Jacobian of a curve, 
said Jacobian having a genus greater than one, said signature generating logic 
being operatively coupled to said memory and configurable using parameter data, 
said parameter data causing said signature generating logic to select at least one 
Gap Diffie-Hellman (GDH) group of elements relating to said curve, and wherein 
said signature generating logic determines private key data and corresponding 
public key data, and then signs said identified data with said private key data to 
create a corresponding digital signature. 

25. The apparatus as recited in Claim 24, wherein said identified data 
includes a message me {0, 1 } *. 

26. The apparatus as recited in Claim 25, wherein said parameter data 
establishes a base group G and a generator g as system parameters for said 
signature generating logic. 

27. The apparatus as recited in Claim 26, wherein said signature 
generating logic determines said private key data and said public key data by: 
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picking x£-Z* p ; and 

computing v <- g x , wherein said public key data includes v and said private 
key data includes x. 

28. The apparatus as recited in Claim 27, wherein said signature 
generating logic is further configured to: 

determine h<- h(rn), and o<- h x , using at least one hash function, said private 
key data x and said message m, wherein said digital signature includes a. 

29. The apparatus as recited in Claim 28, wherein said hash function 
includes a full-domain hash function h: {0, G. 

30. The apparatus as recited in Claim 28, wherein said hash function 
includes a hash function A':{0, l}*-> G u {_L }, that outputs an element of 
G or x indicating a failure. 

31. The apparatus as recited in Claim 24, wherein said signature 
generating logic is further configured to output said digital signature. 

32. The apparatus as recited in Claim 3 1 , further comprising: 
signature verifying logic operatively coupled to receive said output digital 

signature and determine if said digital signature is valid. 
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33. The apparatus as recited in Claim 32, wherein said signature 
verifying logic is configured using said parameter data and said parameter data 
establishes a base group G and a generator g as system parameters for said 
signature verifying logic. 

34. The apparatus as recited in Claim 33, wherein: 
said public key data includes public key data v; 

said identified data includes a message m\ 
said digital signature includes signature a; and 

said signature verifying logic determines if said digital signature is valid by 
determining h<-h(m) using at least one hash function, and verifying that (g, 
v, h, a) is a valid Gap Diffie-Hellman tuple. 

35. The apparatus as recited in Claim 24, wherein said digital signature 
is included in a product ID. 

36. A method comprising: 

receiving message data and a corresponding digital signature and public 
key data; 

using parameter data configure signature verifying logic that performs 
cryptography operations based on a Jacobian of a curve, said Jacobian having a 
genus greater than one, said parameter data causing said signature verifying logic 
to select at least one Gap Diffie-Hellman (GDH) group of elements relating to said 
curve; and 
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with said signature verifying logic, determining if said digital signature is 
valid using said public key data and said message data. 

37. The method as recited in Claim 36, wherein said message data 
includes a message me {0, 1 } *. 

38. The method as recited in Claim 37, wherein said parameter data 
establishes a base group G and a generator g as system parameters for said 
signature verifying logic. 

39. The method as recited in Claim 38, wherein: 
said public key data includes public key data v; 
said digital signature includes signature a; and 
determining if said digital signature is valid further includes: 

determining h<-h(m) using at least one hash function, and 
verifying that (g, v, h, o) is a valid Gap Diffie-Hellman tuple. 

40. The method as recited in Claim 39, wherein said hash function 
includes a full-domain hash function h: {0, G. 

41. The method as recited in Claim 39, wherein said hash function 
includes a hash function /j':{0, 1}*-^Gu {jl }, that outputs an element of 
G or ± indicating a failure. 
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42. A computer-readable medium having computer implementable 
instructions for causing at least one processing unit to perform acts comprising: 

receiving message data and a corresponding digital signature and public 
key data; 

using parameter data configure signature verifying logic that performs 
cryptography operations based on a Jacobian of a curve, said Jacobian having a 
genus greater than one, said parameter data causing said signature verifying logic 
to select at least one Gap Diffie-Hellman (GDH) group of elements relating to said 
curve; and 

with said signature verifying logic, determining if said digital signature is 
valid using said public key data and said message data. 

43. The computer-readable medium as recited in Claim 42, wherein said 
message data includes a message m e {0, 1 } *. 

44. The computer-readable medium as recited in Claim 43, wherein said 
parameter data establishes a base group G and a generator g as system parameters 
for said signature verifying logic. 

45. The computer-readable medium as recited in Claim 44, wherein: 
said public key data includes public key data v; 

said digital signature includes signature a; and 

determining if said digital signature is valid further includes: 

determining h<- h(m) using at least one hash function, and 
verifying that (g, v, h t a) is a valid Gap Diffie-Hellman tuple. 
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46. The computer-readable medium as recited in Claim 45, wherein said 
hash function includes a full-domain hash function h: {0, G. 

47. The computer-readable medium as recited in Claim 45, wherein said 
hash function includes a hash function A':{0, l}*^Gu {j_ }, that outputs 
an element of G or J. indicating a failure. 

48. A method comprising: 
identifying data to be signed; 

establishing parameter data for use with signature generating logic that 
encrypts data based on a Weil pairing on a Jacobian of at least one super-singular 
curve having a genus greater than one; 

determining private key data and corresponding public key data using said 
signature generating logic; and 

signing said identified data with said private key data using said signature 
generating logic to create a corresponding digital signature. 

49. The method as recited in Claim 48, wherein said identified data 
includes a message m € {0, 1 } *. 

50. The method as recited in Claim 49, wherein said signature 
generating logic establishes EIF l p as an algebraic curve having genus g equal to at 
least two, J being a corresponding Jacobian, such that P, Q € J are linearly 
independent points of order q and Pe JIF pl and JIF pla . 
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51. The method as recited in Claim 50, wherein determining said private 
key data and said public key data includes: 

picking x$-Z* q , and 

computing R+- xQ, wherein said public key data includes R and said private 
key data includes x. 

52. The method as recited in Claim 51, wherein signing said identified 
data using with said private key data using said signature generating logic further 
includes: 

determining P m +- h(m)e JIF pi , and S m +- xP m wherein said digital 
signature includes cr, which is an x-coordinate of g points in a representation of S m 
as a reduced divisor. 

53. The method as recited in Claim 48, further comprising: 
outputting said digital signature. 

54. The method as recited in Claim 53, further comprising: 
determining if said digital signature is valid using signature verifying logic. 

55. The method as recited in Claim 54, wherein said signature verifying 
logic is configured to: 

receive said public key as R, said identified data as a message m, and said 
digital signature as a; 
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determine that said digital signature is valid for message m using said 
public key data R, if u = v after letting S be a point on JIF^ whose x-coordinates 
is in a and whose ^-coordinate is y for some ye F , 9 and by setting u+- e(P,S) and 
e(R, <t>(h(rn))); 

otherwise determining that said digital signature a is invalid. 

56. The method as recited in Claim 48, wherein said digital signature is 
included in a product ID. 

57. A computer-readable medium having computer implementable 
instructions for causing at least one processing unit to perform acts comprising: 

identifying data to be signed; 

establishing parameter data for use with signature generating logic that 
encrypts data based on a Weil pairing on a Jacobian of at least one super-singular 
curve having a genus greater than one; 

determining private key data and corresponding public key data using said 
signature generating logic; and 

signing said identified data with said private key data using said signature 
generating logic to create a corresponding digital signature. 

58. The computer-readable medium as recited in Claim 57, wherein said 
identified data includes a message me {0, 1 } *. 

59. The computer-readable medium as recited in Claim 58, wherein said 
signature generating logic establishes EIF l p as an algebraic curve having genus g 
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equal to at least two, J being a corresponding Jacobian, such that P, Q e J are 
linearly independent points of order q and Pe JIF^ and Qe JIFj*- 

60. The computer-readable medium as recited in Claim 59, wherein 
determining said private key data and said public key data includes: 

picking x£z* , and 

computing R*~ xQ, wherein said public key data includes R and said private 
key data includes x. 

61. The computer-readable medium as recited in Claim 60, wherein 
signing said identified data using with said private key data using said signature 
generating logic further includes: 

determining P m +- h(m)e JIF^ 9 and S m <- xP m , wherein said digital 
signature includes a, which is an jc-coordinate of g points in a representation of S m 
as a reduced divisor. 

62. The computer-readable medium as recited in Claim 57, further 
comprising: 

outputting said digital signature. 

63. The computer-readable medium as recited in Claim 62, further 
comprising: 

determining if said digital signature is valid using signature verifying logic. 
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64. The computer-readable medium as recited in Claim 63 , wherein said 
signature verifying logic is configured to: 

receive said public key as R, said identified data as a message m, and said 
digital signature as a; 

determine that said digital signature is valid for message m using said 
public key data R, if u = v after letting S be a point on J/F^ whose x-coordinates 
is in a and whose ^-coordinate is y for some ye F pi , and by setting u*- e(P,S) and 
e(R, <t*h(m)))\ 

otherwise determining that said digital signature o is invalid. 

65. An apparatus comprising: 

memory configured to store identifying data to be signed; 

signature generating logic that is configured using parameter data such that 
said signature generating logic encrypts data based on a Weil pairing on a 
Jacobian of at least one super-singular curve having a genus greater than one, and 
determines private key data and corresponding public key data and signs said 
identified data with said private key data using said signature generating logic to 
create a corresponding digital signature. 

66. The apparatus as recited in Claim 65, wherein said identified data 
includes a message me {0, 1 } *. 

67. The apparatus as recited in Claim 66, wherein said signature 
generating logic establishes EIF l p as an algebraic curve having genus g equal to at 
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least two, J being a corresponding Jacobian, such that P, Q e J are linearly 
independent points of order q and Pe JIF^ and Qe JIF pla . 

68. The apparatus as recited in Claim 67, wherein said signature 
generating logic is further configured to: 

pick x£-Z* , and 

determine R<- xQ, wherein said public key data includes R and said private 
key data includes x. 

69. The apparatus as recited in Claim 68, wherein said signature 
generating logic is further configured to: 

determine P m *- h(m)e J/F pl 9 and S m <- xP m wherein said digital signature 
includes a, which is an x-coordinate of g points in a representation of S m as a 
reduced divisor. 

70. The apparatus as recited in Claim 65, wherein said signature 
generating logic is further configured to: 

output said digital signature. 

71. The apparatus as recited in Claim 70, further comprising: 
signature verifying logic configured to receive said output digital signature 

and determine if said digital signature is valid. 

72. The apparatus as recited in Claim 71, wherein said signature 
verifying logic is configured to: 
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receive said public key as R, said identified data as a message m, and said 
digital signature as a; 

determine that said digital signature is valid for message m using said 
public key data R, if u = v after letting S be a point on JIF^ whose x-coordinates 
is in o and whose ^-coordinate is y for some j/e F p i , and by setting u*- e(P f S) and 
v- e(R, <Mh(m)))\ 

otherwise determining that said digital signature o is invalid. 

73. The apparatus as recited in Claim 65, wherein said digital signature 
is included in a product ID. 
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